Actualización

2025-04-10 12:49:05 +02:00
parent 4aff98e77b
commit 1cdd00920f
9151 changed files with 1800913 additions and 0 deletions
--- a/main/auth/sso/sso_server_test.php
+++ b/main/auth/sso/sso_server_test.php
@@ -0,0 +1,105 @@
+<?php
+/*
+  SSO sample
+
+  This is the "server" of my institution/university authentification "code"
+
+  1. Active all the SSO option in your Chamilo installation: main/admin/settings.php?category=Security
+  2. Copy the main/auth/sso/sso.class.php file to something else representing your remote system, like
+     sso.Remote.class.php and modify the class name in soo.Remote.class.php to "ssoRemote"
+  3. Insert the following setting manually in your database (change the selected_value from 'Remote'
+     to the name of your system (used in the filename and classname above).
+     INSERT INTO settings_current (variable, subkey, type, category, selected_value, title, comment, scope, subkeytext)
+     VALUES ('sso_authentication_subclass',NULL,'textfield','Security','Remote','SSOAuthSubClassTitle','SSOAuthSubClassComment',NULL,NULL);
+  4. Make sure this script is located in the index page of the server you fill in the "Domain of the Single Sign On server" Chamilo setting
+     For example this script must be located in example.com/index.php if you set the "Domain of the Single Sign On server" = example.com
+  5. Create a user in chamilo and in your external system with login = "joe" and password = "doe"
+  6. Remember this is just a sample! Check the chamilo drupal extension for more information:
+     http://drupal.org/node/817682
+  7. When activating the settings in step 1, the principal Chamilo file main/inc/local.inc.php will load the class main/auth/sso.[class.php library
+ *   that will redirect to this field with some parameters.
+ *
+*/
+
+exit; //Uncomment this to execute the page
+
+//After you located this file in you new domain and you set the settings in step 2,
+//this page will be loaded when entering to the Chamilo site if the SSO option was set in step 1.
+
+//Getting the chamilo server
+$my_chamilo_server = filter_xss($_SERVER['HTTP_HOST']);
+
+$account = [];
+
+if (isset($_SESSION['my_server_user_session'])) {
+    //validate if the user is already logged in my external system in order to redirect to chamilo
+}
+
+//Login process
+
+if (isset($_POST['user']) && isset($_POST['password'])) {
+    //1. Your Server validations
+    $validate = validate_user($_POST['user'], $_POST['password']);
+
+    if ($validate) {
+        /* 2.Get the chamilo username and password from your system or from webservices */
+
+        $account['username'] = 'jbrion525'; //username in Chamilo
+        $account['password'] = sha1(sha1('jbrion525')); //encrypted password with assuming that the first encrypted method is sha1 in chamilo
+
+        $master_auth_uri = $my_chamilo_server.'/?q=user';
+
+        // Creating an array cookie that will be sent to Chamilo
+        $sso = [
+            'username' => $account['username'],
+            'secret' => $account['password'],
+            'master_domain' => $my_chamilo_server,
+            'master_auth_uri' => $master_auth_uri,
+            'lifetime' => time() + 3600,
+            'target' => filter_xss($_GET['sso_target']),
+        ];
+
+        $cookie = base64_encode(serialize($sso));
+        $url = chamilo_sso_protocol().$master_auth_uri;
+        $params = 'sso_referer='.urlencode($url).'&sso_cookie='.urlencode($cookie);
+        $final_url = filter_xss($_GET['sso_referer']).'?'.$params;
+
+        //If your user exists redirect to chamilo and set the account in a session to check it later
+        $_SESSION['my_server_user_session'] = $account;
+
+        //3. After validating the user in the server and getting and setting the user data of chamilo in the sso_cookie variable:
+        // Redirect to this URL
+        header('Location: '.$final_url);
+        exit;
+    } else {
+        echo '<h2>Wrong parameters</h2>';
+    }
+}
+
+if (isset($_POST['logout'])) {
+    //echo do something to logout
+}
+
+function validate_user($user, $pass)
+{
+    return true;
+}
+function filter_xss($val)
+{
+    //do some cleaning
+    return $val;
+}
+
+function chamilo_sso_protocol()
+{
+    //get the sso_protocol from chamilo using webservices
+    return 'http://';
+}
+?>
+<html>
+    <form method="post">
+        User <input name="user"/>
+        Pass <input name="password" />
+        <input type="submit" value="Login">
+    </form>
+</html>